WordPress

css

Revisions UI update:

2013-04-28 10:56:57 +00:00

images

Post Format UI.

2013-03-29 03:35:41 +00:00

includes

Remove redundant echo calls from list tables. Don't mix string concatenation with direct output. see #24210 .

2013-04-29 01:10:50 +00:00

js

Revisions UI update:

2013-04-28 10:56:57 +00:00

maint

Use correct escaping function. fixes #23334 .

2013-02-14 05:52:23 +00:00

network

Remove extraneous function parameters in the network admin. props rlerdorf. see #24210 .

2013-04-29 00:26:49 +00:00

user

…

about.php

Remove 'Insert Multiple Images' from the about page as it is now completely invisible in the UI. Requiring shift-click but not mentioning it is a bad omen. props helenyhou. fixes #22455 .

2012-12-07 20:58:34 +00:00

admin-ajax.php

Screen option for Post Format UI.

2013-04-25 07:28:33 +00:00

admin-footer.php

…

admin-functions.php

…

admin-header.php

Consistently show "Customize" item in the admin menu. props ethitter. fixes #21413 .

2013-03-29 23:25:06 +00:00

admin-post.php

…

admin.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:00:25 +00:00

async-upload.php

Verify attachment parent during upload.

2012-11-29 02:39:34 +00:00

comment.php

…

credits.php

Reorganize and polish the About WordPress 3.5 screen. Offer strings for translation.

2012-11-28 21:00:09 +00:00

custom-background.php

Revert 23416, 23419, 23445 except for wp_reset_vars() changes. We are going a different direction with the slashing cleanup, so resetting to a clean slate. see #21767

2013-03-01 16:28:40 +00:00

custom-header.php

Sanity checks on image metadata to avoid warnings, etc.

2013-03-29 20:51:35 +00:00

customize.php

Refactor the Customizer accordion so that it can be used in other locations.

2013-02-14 22:58:04 +00:00

edit-comments.php

Ensure the referer functions operate completely on unslashed data: wp_referer_field(), wp_original_referer_field(), wp_get_referer(), wp_get_original_referer().

2013-03-01 17:58:43 +00:00

edit-form-advanced.php

Remove unused variable and CSS class. see #24046 .

2013-04-26 12:36:12 +00:00

edit-form-comment.php

Remove ancient 'lookup' quicktag from the text editor. This had called up answers.com.

2013-04-22 20:17:25 +00:00

edit-link-form.php

Remove dead code. Removed in [23445], accidentally reinstated in [23554]. This was found during wp_reset_vars() cleanup. see #21767 .

2013-04-06 20:47:12 +00:00

edit-tag-form.php

…

edit-tags.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:00:25 +00:00

edit.php

Bulk actions: do not move locked posts to the trash, props pdclark, see #23792

2013-03-18 21:11:06 +00:00

export.php

…

freedoms.php

Reorganize and polish the About WordPress 3.5 screen. Offer strings for translation.

2012-11-28 21:00:09 +00:00

import.php

…

index.php

We no longer care if wp-admin/index.php is parseable by PHP 4. (And it's not, anyway.) If a user hits the root or wp-admin/install.php, they do get a proper warning.

2012-12-11 16:08:58 +00:00

install-helper.php

…

install.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

link-add.php

Remove unused variables reset by wp_reset_vars(). Many of these haven't been used since b2. see #21767 .

2013-02-16 18:28:41 +00:00

link-manager.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

link-parse-opml.php

…

link.php

Remove unused variables reset by wp_reset_vars(). Many of these haven't been used since b2. see #21767 .

2013-02-16 18:28:41 +00:00

load-scripts.php

Script loader: Chunk the script names as passed to load-scripts.php into 128-character pieces. Avoids hitting a limit for the length of a single variable, such as suhosin.get.max_value_length which defaults to 512. fixes #22757 .

2012-12-05 18:57:56 +00:00

load-styles.php

…

media-new.php

Escape form action urls with esc_url() rather than esc_attr().

2013-03-18 14:01:25 +00:00

media-upload.php

Split media-new.php and media-upload.php into distinct files.

2012-11-21 12:19:40 +00:00

media.php

Revert 23416, 23419, 23445 except for wp_reset_vars() changes. We are going a different direction with the slashing cleanup, so resetting to a clean slate. see #21767

2013-03-01 16:28:40 +00:00

menu-header.php

Revert [23871] - Customize should be added to the menu, but not hacked in as first. see #21413 .

2013-04-22 19:33:39 +00:00

menu.php

Customize requires edit_theme_options. If you only have switch_themes (rare, but a case that core supports), you should not have access. fixes #21413 .

2013-04-22 19:37:26 +00:00

moderation.php

…

ms-admin.php

…

ms-delete-site.php

…

ms-edit.php

…

ms-options.php

…

ms-sites.php

…

ms-themes.php

…

ms-upgrade-network.php

…

ms-users.php

…

my-sites.php

…

nav-menus.php

Remove _wp_delete_nav_menu(). wp_delete_nav_menu() should instead remove the menu from theme locations, which was the only difference between the functions. see #23119 .

2013-04-04 04:28:12 +00:00

network.php

Make get_home_path() return consistent slashes. fixes #23175 .

2013-03-12 11:04:14 +00:00

options-discussion.php

Consistently apply class="title" to our options page h3 tags.

2013-04-16 20:19:29 +00:00

options-general.php

…

options-head.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

options-media.php

Consistently apply class="title" to our options page h3 tags.

2013-04-16 20:19:29 +00:00

options-permalink.php

Redirect after save on options-permalink.php to ensure permalinks are fully flushed. fixes #9296 . see #14345 for more.

2013-04-22 20:57:34 +00:00

options-reading.php

Revert page on front changes. Reverts [22127] [22129] [22135] [22136]. see #16379 .

2012-11-19 01:28:32 +00:00

options-writing.php

Allow any post format to be default, not just ones with explicit support.

2013-04-25 06:08:29 +00:00

options.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

plugin-editor.php

Don't unslash variables that came from wp_reset_vars(). see #21767 .

2013-03-01 18:59:54 +00:00

plugin-install.php

…

plugins.php

Show plugin activation message when activating a network only plugin on a single site installation.

2012-11-27 16:08:35 +00:00

post-new.php

No AYS or autosave for attachments on post.php. Reverts part of [22725]. fixes #22491 .

2012-11-27 02:02:32 +00:00

post.php

Revisions: move the call to _wp_upgrade_revisions_of_post() to edit-form-advanced.php, in the code block checking whether we should show the revisions postbox. See #16215

2013-04-06 23:43:05 +00:00

press-this.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

profile.php

…

revision.php

Revisions UI update:

2013-04-28 10:56:57 +00:00

setup-config.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

theme-editor.php

Don't unslash variables that came from wp_reset_vars(). see #21767 .

2013-03-01 18:59:54 +00:00

theme-install.php

…

themes.php

Revert [23871] - Customize should be added to the menu, but not hacked in as first. see #21413 .

2013-04-22 19:33:39 +00:00

tools.php

Make sure .widefat border and background coloring only applies to tables. props MikeHansenMe. fixes #21936 .

2013-01-22 14:44:04 +00:00

update-core.php

Escape form action urls with esc_url() rather than esc_attr().

2013-03-18 14:01:25 +00:00

update.php

Revert 23416, 23419, 23445 except for wp_reset_vars() changes. We are going a different direction with the slashing cleanup, so resetting to a clean slate. see #21767

2013-03-01 16:28:40 +00:00

upgrade-functions.php

…

upgrade.php

Always wp_unslash() the return of wp_get_referer().

2013-03-01 17:20:32 +00:00

upload.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:14:09 +00:00

user-edit.php

Cleanup additional capabilities display in user-edit.php. Mark a string for translation.

2013-03-18 13:27:57 +00:00

user-new.php

Fix copy/paste error in user-new.php. props tivnet. fixes #24022 .

2013-04-10 16:13:59 +00:00

users.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-03 16:30:38 +00:00

widgets.php

Fix various typos and omissions across a number of help tabs. props DrewAPicture, Ipstenu. see #22451 .

2012-11-22 08:45:15 +00:00